takemo101/laravel-simple-vm

Release historydanger

The latest release was over four years ago, with no releases in the last 12 months; the initially regular four-release history does not offset the prolonged inactivity.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release gap and indicating a real maintenance concern.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting expectations unclear; the matching repository, tests, README, and release notes provide some compensating transparency.

Workflow auditcaution

All four analyzed action references are unpinned, which weakens build reproducibility and supply-chain hygiene. There were no untrusted checkouts, script injections, or higher-severity audit findings, so this remains a caution rather than a severe risk.